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Abstract of JP 2003124927 (A) 

PROBLEM TO BE SOLVED: To perform mutual 
authentication by using NTRU public key encryption 
method. SOLUTION: Mutual authentication between 
a server and a client is performed with the protocol 
using an NTRU private key encryption method. By 
adding random numbers which are going to be seeds 
of a session key and their hash value to transmission 
data, it makes possible to check whether description 
failure is generated. The session key is formed on 
the basis of the random numbers for the session key, 
and data transmission and reception after 
authentication are performed by encryption. Process 
of the NTRU encryption method is light and the 
protocol is simple, so that mounting to an assembly 
type apparatus is enabled. 
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SfeBBWe * T l ^ « H a x >y * f S & ^{tl&st T- 
®k, *«f*SCfc*^fc-rsfflH»ffii'X7 l .i.o 10 
[ft 2 ] MfB^H«Bt S^jfti* NTRU &ifSlB§ 

nmt Lxmtt^ ttt>ic, mim^^n Lit? 

-$J£&fimmMX'&mtLX. -tz<y~>a y • *~0) 
Dffi^ftfc^vy^afikifcK-f £Ck£J;oT, 7 a v Pw1 20 

-©afcgtc-fey */ a y • +-5:feiSc-f £-fe-y ^a > • 

■ems© i v r«Hf s§ Tj^m ^ r «SKiE%ff 5 fflsis 

*t S ir -y >- 3 > • ^-coa^.bJcX x y 7° k , 

ft H«A7 5/ afi^ttiraf 3 c k fC £ o r, S^{t© 

m#m 6 ] tm&mmgmim*. ntru 
»»e-t^>g > • *-©«k&5sy&k-?-©;v.y 

^~©ffl k ft SSJR k^C vy S/ a ffl^lX 0 ttl U "fe V 
5/g y • *-©afc«:Saj»0My'>ai[*JiCtBLT2l 

mmiz%tf%m^<tK9mLrcfr : 5fr%:nmt%, c t 
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[11*318] ffl{sffl^5Wc£j£L/c-fe-y^a > • * 
~(DM%&K-tv>'ay - *—%^.J&tZ>X?v7°t, 

Xf-^t ££5>{cfii;iSCk£#$[k-r Sf!*l5 

[it *w 9] si (Dmmtm 2 osh©ibt?^tS©^ii 

X, 

2 ©gft § x f -y 7° k , 

m 2 cDgHtf, se 1 ©ss©«^s^ c a %mmLfc 

^kkfefcSbCDM^^afiHa s h (Sb) % 
B+^LT, Nb, Sb, Hash ( S b ) %m 1 CDSH© 
^MSlE.-e^ftL^-r-^E. (Nb, S = , Hash 
(Sb) ) ^ rsWME^^/ctmC^ 

kfetcifi i <DmwKmm-?%*?y7t, 

m i ©sa^\ m 2 ©gg©s? c b l rc 

ft, gftClMBtttfSMT 9 -* E. (Nb, Sb, Has 
h (Sb) ) ^ft^ftLT, •byi/gV-^-OiSbC 
;vr>a|Hash' (Sb) 3£f[%LX, ^tLtc'W 
^affiHash (Sb) k-gtf 3frSMC«fc-3"Z\ ^ 
r^Mfc $5 » S «^{fc{c ^ L fc frSfrfcWJ-f 5Xf7 
7°k. 

t>\ mmmmtDSimN, rxs^ y ^ a y • +-©a s . 

44*f «kkt>fcS.©A>y>alHa s h (S.) * 
ff-WLT^ Na, S a , Hash (S a )^S2©Sg© 
^HaEb-eHl^tLfc'r-^Eb (N., S., Hash 
(Sa) ) Smx-^^S^OtHLfcSLftNbkkfe 
(c^2 0SBfc^{f^-§X^'yXk, 

k^Li^Sjb^^ 1 ©SB^*A5SISt-^Xx-y7 0 

*Amm.KimLrcc£K),mLx, m2(omwt>\ & 

ftOym^MX^t?-*^ (N a> S a , Hash 
(Sa) ) %m^itLXs *>r>3>-^HDlS.©A 
■r>aiHash' (Sa) ^sfgLT, SffLfc/vyv' 
alHash (SO k-grTS^S^t «feoT, £18 
ftic 2>mmtlc L fc i^Jb^WJ-T § Xx >y 7° 
k, 

-y7°k, 

k ^ L I ^frSfr 2 ©SB**AiiKf « X r -y 7° 

k , *ft«i*r s d k k -r s ssasiE* j* 0 
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J^Lfcfe y * 3 7 • ©a S a S b fcgfc-fe y * a 

7 • 3r-££$f 3Xx-y7k, 

if 1 StfS2CStijlft'yi/a> ■ 

9'~ $ <7)m%m*ft ? X-r -y 7°k , £> Jcfif* 3 <: k 

t?% mmm 9 icm^<Dmmmmm a 

fflHKffiffl©SLSN*5&£"rs#Si:, 10 
•fe -y 7 3 7 • ^-©a k & S SLI^ s a t , 

k, 

SLKN kfe -y 7 3 7 ' • %—(DW. S^7->3 7' 4 1 - © 

a©/ n -y 7 a ft h ^mmm^o-ynrmv^mt l rmm 
wmm^fr z&m l fester- $ * § #©»iis«i 

H'%ixoai"r#©i:, 20 

-t-r>3 7 • +-©as'©/vy7afilH";£!+gt7T\ 
<? tti LfcilfB fflT-©fflSIStEffl©SLI&N' JfejUBffff-fc: 

gfs-rs^ggk, 30 

■e^LfcsuRN t^u^sa^ mmmtt^AW 
mtz^mt, ttztbiamzct tt% 9mm 

1 2 fcEigfflfflSSIESHo 

■fey* a 7 • *-*£j£T5^S^ 

i'b'r>3>- ^-^ffl^Tffi©SBk©B§^x-7© 

a&3M*fr5#Siu 

fl^il l 2 fc|H«©ffiatf,fiESBo 40 

fflSffiffifflCDSURN^^-rsXr y 7°k, 
*>r>3V-*-Cii:SMftS 5 Xf -y 7° 

k. 

•fer>3y • ^-fflfflffl/vy-XufilHfcW-gt-rSXTy 
SJ&Nkfe>y7a7 • 4 1 — ©fflS k-byJ/a 7 • 4 1 -© 

i©A>r>afiH ^Miffli 1 © area-emf ^{t l rmm 

TSXryT 0 ^ 50 
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ftLT, fflfiffl#©fflSM!iEffl©SL$W' k3Iftffl#ft5 
£j$Lfc-fc>y73 7 • ^-©aS'Stf-^/vyyafil 
H'^fxDmi-Xx-y7°k, 

fe-y*3> • +-©aS'©M^7:i{fiH";&fff-gLT\ 

w tu " #-8rr s frSfr t <fc o r i^mc *3 it § 

Hfc&Sl 7] MIB»»f^S(i, NTRUftW 

■ff^LfeSURN fc^U^MSrfrT?, iIMft^£#Afii 

If 5f itfct 3 S ' %MK 

fe-y7 3 7 • ^*4*r8Xff^, 
BRry 7a > • +-^ffl^Tffi©SB^©Bf^T-5© 
^fMfT9Xx'y7fc, *l£iblcmZ-%Ct*&mt 
?%WMm 1 6 KffiKOfflSKaKfjfe. 

%fflO^TffiSKiE*ff a fcaotilllfii^ay tf a 

• V7h^x7^3y(f a - ^ 5JHf jStil^K 
^,«Lfc3H1i«f*t?feoT, iuaEnyn^-^ • 77 h 

tlSHSEffl VftM N § X f -y 7° k , 

fe -y 3 > ■ • +-©ffl k ft 5 mi S ^585£* S X r -y 7 

k, 

fe-y*3> • ^-cDacD/^■y*a^fiH^Itgt" ; SXry 
7k, 

SLMNk-fe-y>'37 • ^- ©as kfey^a 7 • © 
H'^0tHfXry7k, 

feyy/3> • ^-©aS'©/Ny*afitH"^ff-»LT. 
H ' k H "If-m- % fr^ft K <fe o T 4>Mfi K *5 tt § 
f bic £J& L fc jb^sb^tfeit-r S x f -y 7° k , S 
ck^^k-rsiBH^o 

[^^©Pffl^M 

[0 0 0 1] 
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[0 0 0 2] EfcpLOi, *&HBf±. 

SfI^Xx2>&D**gEIgfl7^ tBSKSEgg, MtfJc 10 
[0 0 0 3] 

[fi£*©&«] H'NK 1fMMS#5©M@e^*3i*i:fe 

[0 0 0 4] *-yr-7-7H:, mft%1«*IEM©^fSk 
LTfcW«ft<, ^^HftftkW^XxXy© 20 

[0 0 0 5] $I?L&\ PDA (Personal Digital Assis 
tant) © X 3 &8!^ffii8*K8S#SiS«£g$-f S C 

yy*H£.L?&i,ts£^5t.£Wei*&o 30 
[0006] fft7j\ f^^;l'M©T-^ J ?3yfy7 

tt^7tyre& D . ffif«8£fl50ft&fre> tf-^^n yf 

[0 0 0 7] ti^BtfftfcfifflBU *-yb7- 
7 ® § I K *5i/ ^ T te, 0# ji*. ft 1/ 3 >f > 7" £S 
LfcD^ffi^A^fcD LfttfntfftS1\ nyfyy 

%teiftIS^B^HftH©r«ff^^e>«abfcD, 3- 40 
-f©7°9^^>£ft UCkSSgfre^KftH 

[0 0 0 8] CCDTclsb. ^7F7-yfWm lE^ft 
*g^k©#HX§[£fi : ^<, rfflSffiffii tii^^tiltf 
j£<K9A*i6*VTV3 0 

[0009] ffissiEKti, t^fcfts r^riii^j 
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tS^fcT'tft^ckftWMSnSc Bg^ft©fttt r&w 

[ooio] &mmmm}3.*mmLtcM^ &mm 
%mt Lx&ttoffimm* 1 ofm-tstcW-^j:^© 

[ooi i] LfrL&tf^ * 
m\m mtmmxz ft fit u § 0 

PDACcfeaft/hM CTftt)^C PU/^7-^# 
7J) T'^-yxUIK»©ffi*ii*«S©«^{i:(i, ffiSK 
Etc &M8iBg*f 7? S O li ffl»tt?* S „ 

[0 0 12] LfrL&tf^ feU ■fevS'a > • +-58 

[0 0 13] El©«fe^«:IHIBSfiRB"rSfc«)K, "NT 
RU (x5?h^;l/-) "knftftiS. 5S<_aofflgtM 

[0 0 14] NTRU«ta#^Sfeji<^ft^MBf 

n§a+fs©ma#^i txv wx^it § ^ > x 

7X h7^^-V— ©tfKfifeRT^afeSo -77, NTRU 

/j^a«*s*effl!gi*^a6*»ii:<3 , «<ifc«>*e**o 

imLT, f#n«t©ia^3 5i3^r-i/ a yt3yf 

> ^ © -fe * a u x >r ic umt % c 1 1, -e t s (ht 

tp: //www. ntru.co.jp/) 0 

[0 0 15] NTRUtl H»^-f>^K«l*fi!fflL 

ftv\ ^©s^^fflWft^isiiBf^v'XTi.T^^o 

N T R U©7;lv3 ,> UXi^^^T-r?>Bf^7 0 P-tXtt*M 
T-fe§©"C\ ffifi*S©8e-y h • v^7P7°P-b-y9-^ 

fenatiaa-rsiik^-FtSo -rftfc-^ ntru© 

S>V 7 • 7V— V^s P DAftHCf^XCW 
7°5^^>-kMHtt^?iiE-r^^ k^"P**i:S 
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[0 0 16] LfrL&fc^ NTRU&$Q:«g©K 
ffis tfi^ft (Decrypt) ©RfcS-r-^^Sft* 
k©"5x:?— (Decryption Failur 
e) *&£.?%<lttf$>2> 0 

[0017] Decrypt ion Failure^ 

m c s k . flg^ra-psaH* v ^> a >5«ia& h©^k*«i 

SHf^/cW^: < iHSStfe&ttfc&o T L$ d o 10 
[0 0 18] 

[fgHM??*LJ;^i:1-§SS] #&iJ!<z>BWtt, ^ 

[0019] *5sw©Massw»^ &mw8mr£& 

[0 0 2 0] *^©M%£SWti, M£6^aa^$I© 
[0 0 2 1] 

(is Mt l xmmz nzmmw&mmxmft.® 

AXttfflS&IEfr j£T? & -3 T\ ilfgffl#^SL -fe >y v" 
a y • +-©ak&3SLft£»T3-fe-yJ'a > • 

©a^^x^ xf7^, seisim © r - * * k 

l?'r>3>- ^-©ak^SSLSk^/vy v-affi^tt 
ftnT 3 £ k £ <£ o -<x !*^t© £Jfc&^ * r i ^ 2 -5 
frfcf-x >y ^"rs^bBttc^axtiXr-y^k, ^« 

mx&%, 0 

[0022] fiu r^xf-A_ k«\ ttft 

©SB (Xtt^©«Bi*!SS'r3«£*S>a-;W 40 

[0 0 2 3] *fi§BH©fg 1 OliffifC^SffiSffiffi^XT 

«*B*©fflEffiiE*ff a C t$flLT, N T R U&M 

[0 0 2 4] N T U R&H«f ^£*fcfl3^fc*£\ « 
^Hfc©2;f& (DecriptionFailure)^ 
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wf u ^et7>'3>'- ^-©ak&ssjck^© 

> \ >y J/ a«*#6irr S C k tc <fc o T , £*Hfc©$fcSfctfg 

si^a-b >y s/ a -y i/ a > • ^-&&wf 

[0025] ccx\ mmmm^mx&^y? 
it, mmm^ (D&mmxJi r>a> +-©a k&sa 

ft k % e»\ >y a. fi£Bg^{b L TStfitf « k k fe K , W 
im^fr Lfcf- £ * g »©IHBtf7fi^ft: L 
Tv -b -y a > • +-©Sk & § SLft kf(iDA-r>affi 

a it%WtU LTl n*flX <0 tU * tl/c^M y a ffi k J±K 
-r § C k K J; o T , Sit ft tt S «#{t t L fc ^ 

g*^fiJgiJ1-§ck^'et§ 0 

[0 0 2 6] «^ft©*»^*Tl^^k|lJlff 

fay- ^-Jtmv^tcm^T-zvm^im'iio c k^ 
■e*« 0 -r^^-Ss is^ffiffl^nyxyx©ia{f^k(7) 

[0 0 2 7] Sfc, *%W©^2©ilffi{i, |g 1 ©SS 

^BB® R. *-^A,^*?*« C, %m 2 ©gB{c}i{f 
Xx-y^k, S2 0SH*V ^l©SB©«?S^Ca 

©aSb^r^-r^k kfeK Sb©/N>y->afflH a s 
h (Sb) ^frgLT, Nb, Sb, Hash (Sb) 
1 ©SS©^^ E . XBgmt L fc X- * E . (Nb , 
Sb, Hash (Sb) ) g^©^P^Eb^#/ufc 
«?S«Cb kkfcfcm 1 ©SHtji{Ht-SX-r-y7° 
k, ill©SBA\ »2 0SH©*?S*Cbi6ffltKb 
7c tf, g#©««Mre3M7*-* E. (Nb, Sb, Ha 
sh (Sb) ) ^^{CLT^ -t-y^3 > • +-©aSb 
©A-r>a|Hash' (Sb) ^afWLT, SMLfcM 
■r>aiHash (Sb) t-$C?&tiP&frK- ioT, 
^MJIft: 4BtJ § t K ^ L fc ^5 *^WJf § X r 
-y7°k, «^{Wc^Lr©ao^ktcj£!SLT, ^1 
©SB^\ fflSSIICSltN.Stf'fe^>3 > • 
©aSa^4fiSct"?.kkt{CSa©M-yS/a.fgH ash 
(SO ^IfliLT, Na, S., Hash (S.) %^2 

©SKC^MftEb-pBl^tLfcT-^Eb (Na, Sa, 

Hash (Sa) ) SM-r-^A^azOtHLfeSLSc 
Nb kkfeKB2©SBfc})|{f1-§Xx^y7 0 k. ^2© 
SSW, Sff LfcSJ&Nb ^i^T^BgLfcSLftk^L 

mmicimLtciitizmmLx, m2©ss^\ g^ v © 

ftm^SfiX-^Eb (Na, Sa, HaSh (Sa) ) 

*W.mtLX, tr>3i" 4"— ©a Sa ©/N-y ^ a. fS 
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Hash' (Sa) mmbX. gflLfc-'vyS'afltHa 
sh (S a ) fc-Srf SfrgfrfcioT, ^HttfCfelt 

zmmtic m. l tttpmriz nm s x r y 7° £ . 

{Wc£f&LT©£©iIk{aSgLT, if2©gg#\ ffi 
SSKffl(7)Sy»Na*» 1 ©HgtS{rt£X-r-y7 0 
k, Jgl©Sg*\ S«LfeSL»N.A^^^Lfc 
SLi* klf L©fr 5frl?lff 2 OSIl**Afltffi"r 5Xf7 

7°k, %*#-rs c k^^afc-rsfflsKit&jS'?* 

•5> 0 

[0 0 2 8] CCT, CPU/^-^M^t';?! 10 
X, N T R U&H*^^*E©fcfflEKlE*lJI*fT 

[0029] *m±<onz<»Mm\u%&imw&ffife 
sittt, *55©^ie l < »rwiMT-B§^{b?fifcSLS 

tg^{fc©£J&£j£ELT©&©*§£-©#, S©E£$Lfc 
as.&tfSbjb^-fey^ay '^-S^-rSo 20 
T\ ^©t£©x-£©^DIXD^ t7'>ay4-f 

[0 0 3 0] Sfc, #3glE©£3©ffi!lEti, MffSf*^ 
/r LTgl^ n% fifing k (75 B-P3f£<7)^||«llt#* 

■r-y 7°k, -by 73 7 • S^-OSfc&SSJR S 
%TI3:XttX7^y7k, ■byi'gy • 4^- ©S©/vy i/ 

3 y • ©MS kb-y73 7 • 4 1 — ©a©;vy 7a{S 

HHW^fcLT, iMiffl^©^^^^^!^ k 
jUSffl^b^JiKLfc-tev S'a 7 • *—<om S ' KtH-© 
/ n -y 7 a fl H ' %m 0 mi" ¥ giXti Xf >y 7° k, -try ~> 
ay • 3r~©as'©/vy7affiH"£fWLT\ H' k 

^IS(L/c^5/b^^S1-§^mxtiX-r>y7 0 i;, fcjm 

Silo 

[0 0 3 1] CCX\ CPU>V7— tfPftT'^Ugfi 
u NT R U&BMB^^fcE^fcfflSffiffiM&fr 
[0 0 3 2] *f2iE©^3©fflffilc^S*BSEME 
D til L/ca{affl^©*@5fIiiEffl©SL$CN' £ 
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ttXx-y7k^?5fcflxT^Tfe<j:l\ 
[0 0 3 3] #^083©«ffifcffiSffiSKiEgHX 

ttfflSKiE*i*fc<fentf, ^i&tf^2©ss«. aft 

ffl#*fflSffitE"rs k k fe feS©^iE L < 

o T, ll^{b©^^i|B L T ©&© C k fcflSK"*- S <i k 
Sfc, «^fc©»&£BLT©&©i§-&© 

££$f£o fit, ^-©^©-f-^©^^^ -b 

■y-7 3 7 •*-T*Hf^<fcLT)2gMf SCkfc«J:!9, S8 

[0 0 3 4] *%TOO® 4 ©flB]B», ffi©SHk 
©P^T?3TS©^ll«^7jx^M©TfflSMIE^Ta 7c 

mmmmmm^y^a.-^ • yxr2*±-mfrf 

T, MIBn>k°a-5 • y7h7x7(i, ffiSMMffl© 
SLSN^41-?»Xx-y7 0 k, tr>3 7 -+-©Sk 
^§ai(S^I8^-r§Xx-y7 0 k, -feyi/gy-^-© 
S©m >y $/ a -fit H S X f y 7° k % SUR N k -b >y 

v-3 7 • ^-©SS k-b-y73 7 • ^-©a©^-y7a 

k x fflffiffi^ L k $ % i #©&§§»-£ 

IM^ftLT, a{fffl^©fflSfSfiEffl©SLSN' kSfiffl 
^^Lfc-b-y7a y • +-©iS'Rtff©/vy> 
affiH'^lx ( jmi'X'r-y7 0 k, b>yi/37- ^-©S 
S'©M-y7afiH"^lt»:LT, H' k H"^— SrfS*^ 
<fe o T^IH»fcfelt S S^ftt L fcj^ffi^* 
^S-T^Xx-y7°k, ^Rfi-r§ck^#mt1-?>sH'l 

[0 0 3 5] *^B©»4©«lS!cfliSEfiji(*:tt, 

^7tfa-^f"7XxAfcMLT, ^7lfa— £ • 77 

?>o C©«fe-5^:^(i, MtLH, CD (Compact Disc) 
^FD (Floppy Disk) , M0 (Magneto-Optical dis 

TpI t> ^ ©) ft HC^SRHcft k^gSLT37lfa-^ 

1~-SC kfcKffiWfcnTigt?fe§ c . 
[0 0 3 6] C©<fc-5^BH'l®#:(i, nyk°a-^-7 
XxA±-epJT^©3 7h 0 a-£ • 77h7x7©«t^ 

sis-r s fc»<7), n7^^-^-77h7x7 tm-mm 

» k ©«jg±X(±«l±©fSi!l WH^^S* L tt fe © T* 

fe^o mw-rna; *%Hj5©ig4©ijffitc^siHig«f* 

TPjT£©3 7t°a-^ • 77h7x7^3>-k 5 a 
• 7X-7-AfcY7Xh-;I/-r?>ektcJ;oT, ny 
• yXxA±l?(i^«lW^^«$ti> *IS 
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mom 3 mmfct&mmmmmxmmmm^m t 
[0037] *mm<D-$ tbKimm, »fKii 

[0 0 3 8] 

mmvmmmm] *mma. ntru cr yP t 

o s y s t ems&tf&%Ltz&MWg%tt*kHL 

[0039] NTRua, mmftM^ttm$m*mm t 

N T R U©T;l/3 0Xi^^ff-t?>?f»7 o n-trX«#|iE 
T&«X ffi«§©8HXvF- • v-f^p^a-fe-y-y-c'feft 
atcffia-tSC: tfPV£% 0 t%&%, NTRUO'aH 

PDA&HcD^M^x/VfXtfe^T, 
[0 0 4 0] A. NTRUl>P»B^'>X-rA 

n t r [w&mm%%i/X7- i±ic~D^r mwl 

[0 0 4 1] NTRU^Bg^ftMSHu ^UlSftit M 
fffX p t q 2{|S|CDb#X 7 ~>3 X • tS/aPta-iXM 

N T R U©l^«Bf §->Xf AC'b* a 'J f ^ 



F ®G =H 



(7) #H 2 0 0 3 - 1 2 4 9 2 7 
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* if q ©34iE'i4 (Dmmm c £ o ttj 2 0 

[0 0 4 2] NTRUaf^t^XxAti, (N, p, 

q ) th^3-DCDmm^^~^t, m^mm^n-DN 

- l^S©4lI0^IISL f , L s , L* , L.V^iL 
0 0 p q (iltTSS'MiiSl^tf'g c d 

10 (p, q) =1 1) T'$5C};}:, qfi 

[0 0 4 3] 
[Ml] 

R =Z[X]/(X N -l) 

[0 0 4 4] SitF (GR) (i, J^TfC^i^^^II 
SX«:X^ WVWl£tiS 0 
[0 0 4 5] 
20 [if 2] 



[0 0 4 6] &tc, Vy^RCOm 

mx$> <o , f t c, (Dmm 

[0 0 4 7] 
[S3] 



N-l 



[0 0 4 8] N TRUit^bJc-r^fcfet, «^#M^ 
tt2-CCD^IISf, g (GLJ fcji&TSo -7^©^ 
IIS f H\ ^rX'a n q t^i/OL P p ^ft^tlO^ifc^ 

F ? ®/ «l(mod and 



44.-§>o 

[0 0 4 9] 
[$H] 

F p ®/ -l(mod p) (1) 



[0 0 5 0] (g^i 
[0 0 5 1] 



mivir^x&TtDmz^mtZo 40* as 5] 

* 

ft ■ F ® g (mod p) 



(2) 



[0 0 5 2] ft^flJfCfc'lt^^P^iiiS^S^n^ 

T & * fc < % ^ 'IS V % S o 
[0 0 5 3] fffc^ Bf^M;6WMlJJC^-y-t?-X£ 

•>m^IjRf§o 1O©^]SS0 (GL, ) % 50 



common Oo 

[0 0 5 4] 
[» 6] 

e s p$®h (mod 4 ) 

[0055] ±^m^m\ii^m^m\icmminrc 
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[0056] 'immmt>\ ^mLk^mt^y^-^e 
[0057] mmt^y^-'Je^mmtLtci^m^ic 

t4, $fKMftS 0 
[0 0 5 8] 

DR7 3 

a mf ®e (mod ^) 10 

[0 0 5 9] «^14a©«£-q/2~q 

[0 0 6 0] 
OR 8] 

F jjgw (mod p) 

[0 0 6 1] fiLtPELTtfcfcafc:, NTRU&IMI 20 

©SiR^SS 1 !?, Decryption Failure 
[0 0 6 2] B. ffi5tgfE7°P hn;l/ 

[0 0 6 3] *^(c{£Sffl5fME7°P h=iMt, 00* 30 

z/^tjV • 5. a — 7>y 7 • 7°7— PDA (Personal 
Digital Assistant) &k©#t^©77 VXfcfet^ 

[0 0 6 4] N 1 Ctt. ff«*tMLT:3 7x77lid 

[0 0 6 5] HHfcaVt.fcSfc:* *7h7^ • ^Xf 
Afci\ ^7^7M 1 0«fc5ftJ£«Wft**y M7- 40 

[0 0 6 6] -Y7#— *-y V 1 1 ±Ett, SSic©^-^ 
#£&"fS„ c©?^©-§N4, ifSS^Bft&HCnV 

So nyfy7Eit-^i3tt, 77-fex-#Y7r- 



2 0 0 3 - 1 2 4 9 2 7 
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%cbx°&M&mmm 1 2 m&r* m n; 

77^XtSPDA&H©tff«*l 5fc*fLT, #8 

[0 0 6 7] [ttefeogflff] ©W-efeKfcaKfcJ:-? 
*v h7-7tHW^(4fl*lfl^&^ffl#k:3 7:r7 

y © © § [ m l fli© s& t ^ h © # m # a & # 

&H©}feftSff»3b^fiaiLfe D , a— if©7°7 Y;77© 

[0 0 6 8] C©fcJ6, 2^StJ^HlC^**y 

• 7Xf-A±TH4, n 7x7 7SEia' f 4-^ 1 3ftVS— V 
T/V • a>k°a-^^'|f$g4g* 1 5 K^J'LT3>x>7 

So s sswffif mtc 1 5 ©^ratux^ * * u mti* 

SfflLT^So 
[0 0 6 9] 02k74, *^M«:^S*>y r-7-7 

• i/XxA±T?©=i7r>7lH{i-9--P:x©^tl^ffiPlS 

[0 0 7 0] £1\ nVfy^Eif-^l 314, ffi§l 

k^s«^tf$gs* 1 5 mmLxtvisa y-m 

irtZt (Xx-y7°S 1) , fflgfMEMmc-fe-y7a 7 
. +-©£j&&f T 5 (Xx-y 7°S 2) o 
[0 0 7 1] 3yf>7Eft-^l 3(4, 9! 

aiss* 1 5 tMLTS^iaa^ff^ (xf >y 7 0 s 

3) „ S^5aS(4, fuXx-y7°S 2T'4iSSnftt-y5' 

[0 0 7 2] nyrV^Eftf— ^ 1 3(4, -b 

•y 7a 7 • +-%ffl^T3 7x77fI^®^Bg^{tL 

t, mmtmfflii 5icmmt% cxx-y^s 4) „ * 

LT, ffi7.^S(4/cri7r77^Bg^ftLT^? ) , «^ 
fiW8ffi*l 5(Cji{S1"S (Xx'y7°S 5) o 
[0 0 7 3] CftfcftU »lf$Pis*l 5fflT14, S 

^fcn>T>^*«#ftr5 (Xf-y 7°S 6) 0 L 
T, n7x77^S*LTlIKLT^Lt?^k^T^ 

So 

[0 0 7 4] ^$5, 0 2tC/T;Lfc7P-(CfcX^T, Sl^ 

saa t =i 7-r 77©Eff 5aa©)i#^ r t J: 
[007 5] a^fflggffi-eti, c p u^y-^P^T^ 

#*LT, Xx-y7°S 2 KfcfrSfflEffiaO&afcN T R 
U^n«Bg^75r*&ffl^fc^n hnMffflt So ttM 
tScfe^tc, *^Wmitc^SfflSISIiE7 0 n h^jW 
(4, affffl^^S^fcSLS4lSL/c-try7 3 7 • 4— ffl 
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[0 0 7 6] ilfa-r'-^^tc-fey^a y • 
a i: ft S a* k * y a fit* to A S c t J: 0 . D 
ecriptlon F a i 1 u r e ^iH^Ti^Sft" 1 k 
^Mfi7^t§J:3(a/£o Deer i 

p t i o n F a i 1 u r etf%i%T^&fr}*5fr%=f- 
i^^LT, 54fr ft -fc: >y i/ a yBiLV^z r>a^4- 

[0 0 7 7] B3(Cti, 3J/f^'yEfiil"-^13<!)« 

i 3«u h 1 1 ft 2©* 

-y h 7— ^SST*^ yfc— S>0aS3fi*fT5 fc«>0)j3l3 
fa'gP3 1 k, KflHttBtiiftU 5ftH©^gP©ga^6S 

£fiSc^3 3 k, +r-^ 1 3 ^^(DM^-m^^t^m 

^m&3itfm3 4 k, ma*yt~-v<oi$m£ j p&m* 

»s>uw* 1 3 § jf©*Mft • 'mm^wmmwm 
^ft kfiFfs© t- # *u&? % * * u 3 6 k , saea 
ag^3 7 k, si3>f>7%tats3yf^yia 

gR3 8 k, 3>T>yK#9--liX%Sltfc^aJ©|g|l 

[0 0 7 8] «yg£&iEgB3 2 ti, 3SSfla53 1 "TS 
m*nfc««flBB*B* 1 4<7)ll?g£C Brtifoc 
a t i onASIftffifSfcfc&E* C©*P#fefc:#£ 



0g|$3 6Kfi#LT*<. 

[0 0 7 9] SjR&£fiP3 314* fflHffiffifcffl^&ft* 
£L»Nb££j£LfcD^ -fe-y^a > • ©«kft£& 

ffiJg* 1 5 ft if <Z>5H3fB# k -fe -y ^ a >tf«Lfc L Tl^S 

[0 0 8 0] *?S^.^)3icg|53 4 ii. 3>f>7Eit 
1 3 B^fiD&WfcEbfc^UgPa 6*^1X0 tiJL/ 
T, CCDEb*-§-/ofc*?S^iC ertif icati 
o nBKiLT, SS3flSff3 1 fre>3>f >yE#$fc 

k ft * K^if 1 5 icmmt % , 

[0081] Bt^saagp 3 5 a, «tif ti«* 1 5 ft k 

©SIM ffl¥K8ffl t§f-^5fl#O^F« E. vm^ 
g[5 3 5tt, a#ffi#k^L^-ofcS^©-by->3 > • 

[0082] sBESQagp 3 7 a, st^nt mm* 1 5 ft k 

c^yfy ^Bift k © Iffl-eSiO&SfcfT 5 0 fll*. &\ 
3HEffl#fr 5 ©SfH ^ -y b- S^fc # S n § -r'- £ © > n >y 
> a. ffi *f+H L T , Is] U < Sfg^ -y -fe - S> fc $ S ft S ^ 
•y S/afflkH^-r S d k5c «fe t> , 5HtfflW*«re;fc* 
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^§A^TOJi-?.ck^^t§c. s/c, fflsifMafc 
ntru & MHB£*f ^ t i ^ i)\ mtmrnm 3 

7(i, /Ny^afflCfig^Cit), Decript ion 
F a i 1 u r e^etT^S^If^^fi'^f § 

[0083] ftfc\ 3>7^> > yie{f-9--A 1 3 1±, 

ffl/N- H 7 x TSK k L X > "T S C k rTII*P* 

7-yXT->a> (ws) v^;i"3 
(pc) tminz-miKammy^T-i* 

■5 mmr-mm? % z. 1 1 nmx*h% 0 

[0 0 8 4] S/c, 04(:ii, 3yf-y7lE{B'9--/M 

3 ^ 6 31 y t- y y<Dmm~ v. xz^fz mmmm^ 
mmnm%^ \ 5 a, 4gr^7b7 

■fe-^CSSSffl^frafcfeOSISfflaPS 1 k, ^tyy-y 
7E#-9— ^ l 3&£0i*a$Siffr&3#Lfc*?»& 

%^fiE-r§«?s«.^iiE^5 2 k, sijR^^ass 3 1, 

20 »^ff«*l 5 £#©*?S£££jiCf3*?W£i£ 
$gP5 4 k, SSM^y-b-^OBg^JpSM^'yfe-^ 

©«#{t%ff5Btwiap3 5 k, ig^tfcajR^isffi 
it 1 5 mmmrn • ^ra»-f>5i#ffi#©^ra« 

ftkpjT^x-^^ffi^S^tUg^S 6 k, im 
gP5 7k, ^yy-y^Mm-^\ 3^?,S{fLfc 
x>'\ 1 y*B^OT-r?)3iyx> > yS^g|5 5 8 ks 

[0085] m^m&m&s 2 it, m^mms 1 t?s 

30 fiSnftai'f^B^^l 3©S?S^,C e r t 
i f o c a t i o n B^ltfiE-tSkk&tC, CCDM^g 

n^^n^^yy-yvmm-^i 3©»ffi^E b * 
[0086] mm^Ms 3ti, fflSKffitffli^ns 

aiS[N a ^fiScLfcD, -fe-rya > • +-©Skft?>a 

y7EfW-^ l 3ftk©jlMffl^k-b>y^a >^5ti 
LTl/^«lfflH:^ti;aJ5 6t^#^tlTl^ 0 
[0 0 8 7] «^»*^gP5 4 ti % 1 5 

40 i^C^BMiE.S^tUWS 6^?>lX0tHLT, d© 
E, %^f£«?S^i Certification A* 

>"r>7E{f' 1 t-/^l 3W£lff£o 
[0 0 8 8] Bf^5!iag|55 5 fi, n^f^yEiu--^ 

1 3 ft (c^fit-r s x- * e 



S 0 Hf^Saaa55 514, Hall?^^L^of; 

50 £fi£LT, ^Mamo^fii^-^CBt^fbfcffl^sc: 



(10) 
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[0 0 8 9] Eteaa^ 5 7&, nyy-yvMm-^ 

£c7Vvy S/affifcffi-JS bT, ra 13 < Sff ^ >y -b-S^c-^ 
$W^'r>affc S c i: t J: D , JlfflST^T 

MMUfcN T R U&ra»Igre#££ffl^TVS*^ 1211 
7te, Ayi/a ffiCint <fe D , D c c r i p 
t i o n F a i 1 u r e^^TI/^^Hd^^x 10 

[0 0 9 0] H5t«, »»«*1 5t3>fy7 

^LTl^o fiU URffffiffllS* 1 5 N T R U& 

re«if #^fsk: «t e . t c nizmmmmm 

ny-ry^gdM-^-^l 3&, NTR 

u ^Hwm^sK * e b t c nt#»i 
[0091] £i\ 7^r7hfcbr©*rfif«* 

1 5&, S^ftiiE.^^S?I*Ce r t i 20 
f i c a t i o n A^iilf-r^ (PI) 0 
[0 0 9 2] =i>x>^iH{f-9— ^1 3ffJJ^tt, ton 
Tg£C ertification A^Sit?.^ fiS 

^m&mm 3 2 -p c n^iif % 0 
[0093] ti^a^^iEH/^fcWBf^nfciB^Kti, 

SJ£f££^3 3T\ fflSMEJHl^SSURN., fc, b-y 

t> )lS%;vy v-a • r;bdfUX74;:<fc D, ■b'r^a^ 

•-t-«lSb©A'r>aiHash (Sb) ^atSf 

§0 ^bT, Nb, Sb, Hash (Sb) $M$flHgjg 30 

§[3 3 4T?£riJL;fc«P»&C erLificaLion 
B £ fefCgSWff $848* 1 5 fcSHiTS (P 2 ) o 

[0094] «ffiw$a^ 1 5®mz, n^mz C e r 

t i f i c a t i o n B fcBg*§r— £ Ea (Nb, Sb, 
Hash (Sb) ) ^eas^-y-fe-^^SM-rSfc, 
flHUEfc Decription Failure CD$t 
SE^rrdo 

[0 0 9 5] 06fCtt, »l«Mra*l 5M-efffctL* 
IBSMffiEfc DecriptionFailure 40 

-e^LTVSo JUT, z.<oyu-^-hK^rwm 

"f So 

[0 0 9 6] Sf", «yg£fcffi§B 5 2 C e 
rtification B£$l!iEf"5 (X7^y7°S 1 

1) o 

[0 0 9 7] W^&fcTiEU^JWSttfcH^fcH: 
(Xxy7°S 1 2) , Bg^{bS!iagP5 5fCfe^T, Bf# 
{br— #E. (Nb, Sb, Hash (Sb) ) £rfM^{tb 
T, Nb, Sb, Hash (Sb) £1X9 tUf (X-r>y7° 50 



#ri2 0 0 3-l 2 4 9 2 7 
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S 1 3) o 

[0 0 9 8] (S^fbSnfc-fey^a 7 • 

aSb{cMLT|W|C/N>y^a • 7;briUX7b£:)IfflbT 
?©A7yalHash' (Sb) £ffr£L (Xx-y7°S 

1 4) , cni^t-r— *^6Bt!5fH*tLfcM'y^affi 
Hash (S b ) fc-^SfrSfrfcWTS (Xt7 
7°S 1 5) o /vyi/iI^KSSCttiot, #f 
*f?ft$fi«8* 1 5ltaD ecription Fail 
u r c^^LTl^l^fcSfitffifSCkjb^^So 
[0 0 9 9] Stf0 5(:SotPlt§o D e c r i p 
t i o n Failure ^ftl^C fc^fitM^tl/ctt, 

w^'B^is* 1 5 -eti, mm^m 5 3 t?, fflsnsaEK 

JBVSSURN. b, b-yv-a 7 • bft^atSfS a 

fcJcD, b-y7a 7 • ©aSaCD/vy^aftH a s 
h (Sa) mmt^o bT, Na, Sa, Hash 
( S a) fcSBffffif ffiiS* 1 5 ©&|f «Et TBg^t LT, 

3izmmt% (P3) c 
[0100] nyx^yiaM-y— ^1 3 Area, sj&n 

bbBf^-f-^Eb (Na, Sa, Hash (Sa) ) tp^b 
&£y^yb— T^fTf&b, fflSKffifcDe crip 
tion Failure ©ttfJySrfrdo 

[0101] ta 7 tct*, ni/f^^Eit^i 3fflS*e 

tTt)tl^)ffl5I2fEfcD ecription Failu 
r e CD*ftffiS-&t)-&Tff -5 fefe©5Qa#)l*7n-^ + 
— hfiDJBST^LTVSo JUT, C©7n-f^-Ft 

[0 10 2] ^-f, IWMfflSI5 3 7T\ Sffyf-y-b-^ 

^Ll^g^^WJLT (X^-y7°S 2 1), JlffffiT 
^Bf^-ft^-y-b-^Ea (Nb, Sb, Hash (St)) 

^5Nb£flxoa^/c^S3b\ -ratj^apdft^if^^ 
[0103] ajRN»w-srr«i:¥!i»fisnrc»^K: 

b (Na, Sa, Hash (Sa) ) £H^tLT, N a , 
Sa, Has h (Sa) MXDMJf (Xx>y7°S 2 2) 0 
[0 10 4] ^KV^\ 'iUmtZtlfcllvi/a 7 • 
aSafcMLTIWID/vyv'a • 7;F3'J XA^riiffl LT 
?©A7yaiHasti' (Sa) 4Mb (Xr'y7°S 

2 3) , Ctl^{fx-^^5.fX'3tH^tlfc/N-y^afit 
Hash (Sa) t-$C?%fr : gfr%nffl~?% (Xf7 
7°S2 4) „ M-y^affi^L<^?.C^fCj;oT, 3 
yf^^EIt-; 1 ! 1 3fl!TZ?tiD ecription 

F a i 1 u r e^lg^Lri/^^C fcSSSKf SC 

[0 1 0 5] Mtf0 5{cMor^1"S o D e c r i p 
tion F a i 1 u r cft-&^Z.tftMM'$tltc'&s 
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mmumz^i 5Km<omf (P4) „ 
[0106] mmsmmn smviz, s#t/cNa^ 

t. mimmmmittvt-itEt (n,, s a , Ha 
sh cs.) ) frt>N,*m*)ft< l ikrcfr&'h\ -rat)** 

[0 10 7] ?LT, J3fiLfc.fc5&#*Sfc.fctK 
flNB«*l 5SO*3>^>^iEfH*-^l 3^ffl{Sffl^ 
*fflSffiE-r« fc fcfcfc. g#g##N T R U&W«Bg 
^TjSK&I^T D ecription Failure 

fc-b T>a>- +-©ffl S ■ S b £#H±T -b >y ^ a > 

»?)£{s%ktt, LO-byi/ay- ^-^fflt^cS^ 

[0 10 8] 20CD-by>ay • ^-©aS.iktfSb^ 

[0 10 9] (1) Sa&tfSbCDXOR (Exclusive 0 
R : ^f«I^ia) ft^-b-y ->a > • *-k-f So 
(2) S. 0±fi;W > Sb 0±ffi/W h*^t5*fct 

[0 110] #S*±-P4^*nfcasa 

C fc#'P*fc#& Of ^fc^ Decription 
F a i 1 u r e#&l^i§-£) b-y :>3 > • 

[0 111] LTs ^©t£©^-£WDffiD£\ -b 
[0112] g8tii, ttflffiftttftu s^yfy^ 

E{§u--/s 1 3ra-efftjnsfflSKiiE©«M^iiKB!rr 

t r v&mm^^K .ts^swiE. k cnfc#*f» 

ntru 'Awwgmmc £ s 'amm E b tcnic 
mmmmmm^-D t © k 1- s 0 
[0113] ^9^r>htLromwmm^. 

1 5 it, S^©ffllE a ^^Kl?i«Ce r t i 
f ication A^lfTS (P 1 1) „ 

[oi 14] =iy^>yMm-^i 3ti&v&, e:©* 

?S^C ertification A^Sfif 5 k, * 

[o i i 5] *?»&tfjEU^k#JK*ftfci&&fctt, 

*t C ft£#f?rH#«* 1 5 MCD^ISH E . THg ^ft L 
T, d ftfcS?*^^ 3 4 T»£j« L fe«?*i& C e 
rtificationB k kfetWStffgS* 1 5 
^{f^S (P 1 2) o 
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[0 1 16] &$fjftgSfiS£ 1 5«T*Hu «?g£C e r 
tificationB kHf^r— #E. (Nb) frbft 
5 * v -b- s>*£fif 5 k , «?S£M£^ 3 2 
^Certification BC&tEfcfT-So 

Kfct/^T, Hf^{tx-£E= (N b ) ^II^ftLT, Nb 
%3lt) HILT, ?©;vr>i|Hasli (Nb) £ffrK 
ajR^aS5 3^fflSKiEfcffl^*SlJR 
N a £ n >x > y SEM-9— ^ 1 3 #J© £H£ 
10 EbTcn^^tTSo ^ LTs C©<fc5fc:l/TffrK 
£ftfcEb (Na) MHash (Nb) 
^ 3>T>yE<t9— ^1 3(ciHfHl-5 (P 1 
3) o 

[0 117] nyx^ySHfa-tt-^ l 3{Ui?fi, E 
b (Na) StfHash (N t ) &$fts* -y-b-v^SfS 

20 W*i 5fcoi/->TOffilE#!HI«:oi,^TiiHB*rSo 

[0 118] PjT£<7Vvyi/a • T/PdfU Xi^K* 

D SJ&2S£g|5 3 2 -e^LfcfSURNb ©^y ^affi^ff 
g-T5 (X^>y7°S3 1) o LT, tf-»*tl7cM>y J/ 
a fi*\ *^'[«$giiS* 1 5 5> S{f L fc/ n y ~> a ft H a 
sh (Nb) k^L^fr§fr£fiJg[J-r3 (X-r>y7°S3 
2) o 

[0 119] (in6^y>3.ffi5b^L^*^ a^tffffi 
1 5 L < ^ y ■b-S^*a^tT»*fc C k 

30 ckib^jSo 

[0120] ^{BbfcBg^ftx-^Eb (Na) 

%Bf^$aagP3 »lffg^*l 5ffi© 

a»N.*flxoa-r (xx-y7°s3 3) „ 

[0 12 1] ^-LT, F/fS^/N-yv-a • T/l/dfUXAfc 
«5 C©SLaNa©My^aftH a s h (Na) 
T (Xx-y7°S3 4) , «in*«Wf«iH*l 
f 3 (Xr>y7°S 3 5) (P 1 4) o 
[0 12 2] $fc, n>r>7iaff^-Ai 3fi> SLiS( 
^g|J3 3-e^*-&fcSUB[Nbfc, wmwft&i 5 
40 ^6©S€T f -^^^{bLTt#e.tlfcSLiS(Na 

-bviszy - $—*£.f&t% (X-r-y7°S3 6) 0 
[0 12 3] mfflfflffiil 5iJ7ii, /vy>alHa 
sh (Nb) %^«y^'yfe-^*S#rsk, ny-ry 

^ffifi-t-^i 3jco^ToaaE«yi%ff^o not 

tt. «^tf?giS*l 5M?ff5 3>f>yiEif-^l 
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